EIP-2026-102640
PRE-CVELinux - Use-After-Free via race Between modify_ldt() and #BR Exception
Title source: legacyExploitation Summary
EIP tracks 1 public exploit for EIP-2026-102640. PoCs published by Google Security Research.
AI-analyzed exploit summary This exploit demonstrates a use-after-free vulnerability in the Linux kernel's MPX bounds violation handling, specifically in the `insn_get_seg_base` function. The PoC triggers a race condition by rapidly modifying the LDT while generating MPX bounds violations, leading to a KASAN-reported use-after-free.
Description
Linux - Use-After-Free via race Between modify_ldt() and #BR Exception
Exploits (1)
This exploit demonstrates a use-after-free vulnerability in the Linux kernel's MPX bounds violation handling, specifically in the `insn_get_seg_base` function. The PoC triggers a race condition by rapidly modifying the LDT while generating MPX bounds violations, leading to a KASAN-reported use-after-free.